"Dear caller, your bug is important to us, and will be addressed by the first available operator. You are currently. number. two ... hundred ... and. forty. eight. in the queue."

http://bit.ly/17cJejn


https://bugs.launchpad.net/openstack-manuals/+bug/1190940

;)


Regards,

Tom

On 14/07/13 12:44, Robert Collins wrote:
I've previously filed a bug about the docs; I agree that this seems like
something to make enabled by default, particularly with nova-network now
on the deprecation path.

-Rob

On 14 July 2013 14:08, Matt Riedemann <mrie...@us.ibm.com
<mailto:mrie...@us.ibm.com>> wrote:

    I had to figure out via the code that unless you specify a firewall
    driver in the neutron plugin's ini file (I'm using openvswitch in
    this case), the neutron security group extension is disabled.

    The admin doc tells you what to do in nova.conf to get nova to proxy
    security group calls through neutron:

    
_http://docs.openstack.org/trunk/openstack-network/admin/content/nova_config_security_groups.html_

    But there is no mention of setting the firwall_driver property in
    the [securitygroup] section of your plugin's ini file.  For OVS, it
    would be setting this:

    
_http://gerrit.rtp.raleigh.ibm.com/gitweb?p=osee-tools.git;a=blob;f=install/build.include;h=2089a32f1da4ad92a61601a4d46a5b34b312f644;hb=refs/heads/osee-havana#l103_

    In nova, security groups work out of the box (well, at least they
    are enabled, you still have to setup the rules).

    Is there a design point of why the neutron security group extension
    is disabled by default (maybe so it doesn't interfere with nova
    somehow)?  If so, we can work on getting the docs updated.
      Otherwise it seems like a bug in the code.


    Thanks,

    *MATT RIEDEMANN*
    Advisory Software Engineer
    Cloud Solutions and OpenStack Development
    ------------------------------------------------------------------------
    *Phone:*1-507-253-7622 <tel:1-507-253-7622>| *Mobile:*1-507-990-1889
    <tel:1-507-990-1889>*
    E-mail:*_mrie...@us.ibm.com_ <mailto:mrie...@us.ibm.com>      
    IBM

    3605 Hwy 52 N
    Rochester, MN 55901-1407
    United States



    _______________________________________________
    OpenStack-dev mailing list
    OpenStack-dev@lists.openstack.org
    <mailto:OpenStack-dev@lists.openstack.org>
    http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




--
Robert Collins <rbtcoll...@hp.com <mailto:rbtcoll...@hp.com>>
Distinguished Technologist
HP Cloud Services


_______________________________________________
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



_______________________________________________
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Reply via email to